Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 8YB1jtJ9WySRiimUOUfBELV26p5PTB9PlN/yDo4k9fo=
Subject key identifier: 51:BD:0C:04:D6:09:2F:3B:43:DE:A4:A4:5F:FB:3D:8E:36:4F:DF:F2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 46A4CB7005A26B2E57B8B5F1ECEAE04040AC029E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 22:54:02 +0000
ROA not before: Sun 18 May 2025 22:49:02 +0000
ROA not after: Sun 17 May 2026 22:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62e8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 07:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a4:cb:70:05:a2:6b:2e:57:b8:b5:f1:ec:ea:e0:40:40:ac:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 22:49:02 2025 GMT
Not After : May 17 22:54:02 2026 GMT
Subject: CN=51BD0C04D6092F3B43DEA4A45FFB3D8E364FDFF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:81:ea:9d:eb:f2:9d:9d:9f:3e:9d:5f:a6:
84:cb:cf:90:59:ea:3a:8d:c1:4f:c9:14:e0:30:07:
db:5d:c1:40:1c:34:5c:e2:cb:57:a1:a8:00:5d:64:
7a:8e:eb:21:b7:5e:c1:16:17:e2:7b:61:7a:4f:7b:
74:6b:56:0d:91:a1:be:7a:cd:f6:e8:a2:f7:c1:bd:
c6:64:0f:be:71:b1:17:09:c5:ba:ee:a2:fe:54:03:
37:56:3b:74:a4:fa:da:8e:5a:45:b0:a4:d1:d4:d8:
b4:af:22:77:3a:7a:f5:2f:5e:c5:eb:50:a2:01:94:
10:97:26:09:e4:bc:c8:14:1d:6e:51:34:52:77:6b:
f2:eb:5f:51:4f:79:03:eb:9d:41:d7:83:10:a3:97:
a2:47:44:de:09:bb:93:07:06:79:0b:fc:1c:6e:ad:
13:cd:b7:fc:bd:65:9d:24:70:06:a1:8e:62:94:0a:
fa:27:01:a1:1a:88:48:f6:ec:04:12:d5:52:8e:06:
aa:89:72:cb:55:8c:6d:b6:6c:89:4d:b7:fc:91:cc:
43:0e:be:a3:f1:a6:cf:66:a0:d2:5a:e2:36:2c:93:
2d:e7:8d:e4:d2:9f:6f:1b:85:e0:92:e6:d7:5b:d0:
f9:a8:21:16:2d:5f:8c:e8:21:2d:b9:b7:95:c9:7d:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BD:0C:04:D6:09:2F:3B:43:DE:A4:A4:5F:FB:3D:8E:36:4F:DF:F2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e8::/48
Signature Algorithm: sha256WithRSAEncryption
6f:3c:f7:c2:88:49:38:33:b6:55:b6:d8:34:3a:fb:c6:50:21:
e9:fb:9d:7d:69:1c:56:5b:cb:70:b9:86:25:29:a8:69:0b:e7:
60:af:ad:32:ff:a3:19:e2:6c:1c:d7:7c:de:8e:dd:fc:17:30:
40:7e:6f:b4:aa:f8:c5:74:b5:fc:e4:59:bf:15:89:71:0c:35:
7e:ca:f6:00:85:c1:5a:65:25:17:85:54:3b:90:e3:ec:da:b2:
1d:e8:0b:06:a0:60:df:6e:e6:b0:0e:40:83:fc:80:c0:52:53:
f8:08:fa:e5:66:43:80:d6:93:7a:d3:d0:a4:a5:a3:e5:c3:1e:
82:e0:a1:23:ff:7d:0d:5f:ad:15:62:2b:ec:09:1d:48:1b:ae:
2c:7a:d9:c1:18:88:1d:78:26:5a:4a:be:3e:23:51:73:db:1c:
a9:2b:fe:4d:aa:28:d5:59:ff:ef:eb:f1:ab:a0:36:11:b0:47:
3d:69:89:af:b3:54:08:47:d8:64:b2:67:e6:cf:cd:8b:42:6f:
12:7e:ec:77:fc:12:96:6c:60:d1:62:f3:00:42:3b:93:07:a0:
47:f6:e1:85:88:f7:96:71:1e:c8:ba:bf:9c:1b:7a:be:49:d2:
89:54:e9:e9:e5:17:0c:02:11:e0:f6:93:cc:79:e5:de:4b:f8:
2d:4e:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:11 2025 by rpki-client